Hi,
On 20/10/18 12:17, P. Ottlinger wrote:
Hi,
as I prepared the release I followed the available ASF-guidelines, but
https://repository.apache.org/content/repositories/orgapachecreadur-1005/org/apache/rat/apache-rat-api/
shows only SHA1 and MD5.
Can I manually sign/created those hashes and upload them?!
You can create the checksums manually (sha512) and they are only needed
for the download area (dist) on apache site...
You can not change the things which will be uploaded to Nexus
(repository.apache.org) and will be transfered to Central..
This is a larger effort which will done in the future...
How do I do this?
How is does the project need to be configured to have proper hashes
during the next release?
How do I add my GPG-key to the KEYS file?
Other ASF projects have a KEYS file in their base repo, which RAT
doesn't have.
I have my doubts about that ...The KEYS must be in the dist area take a
look here:
https://dist.apache.org/repos/dist/release/creadur/
This is an SVN repository to which you have to have access to...
BTW: I've seen on the download page there is no link to the KEYS
file...for GPG check...
Kind regards
Karl Heinz Marbaise
Thanks in advance,
Phil
